A vulnerability was found in libexpat up to 2.6.2 on 32-bit. It has been rated as problematic. Affected by this issue is the function
nDefaultAtts
of the file xmlparse.c. The manipulation of the argument UINT_MAX leads to integer overflow.
This vulnerability is handled as CVE-2024-45491. The attack can only be done within the local network. There is no exploit available.
It is recommended to upgrade the affected component.